product-photography
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill takes user-provided descriptions and interpolates them into prompts for AI models (e.g., bytedance/seedream-4-5). This creates a surface where instructions embedded in the input data could potentially influence the model's output or the agent's behavior.
- Ingestion points: User-defined product attributes, categories, and descriptive keywords integrated into the
beltCLI commands inSKILL.md. - Boundary markers: Absent; the skill uses direct string interpolation into JSON payloads for the CLI tools without specific delimiters or "ignore instructions" headers.
- Capability inventory: The skill uses the
Bash(belt *)tool to execute shell commands and interact with remote AI inference services. - Sanitization: No validation or escaping of user-provided content is implemented in the provided prompt templates.
- [EXTERNAL_DOWNLOADS]: The skill requires and recommends the installation of the
belt-sh/cliand references external documentation and installation scripts located on GitHub. - Evidence: The skill points to
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.mdfor installation instructions and usesnpx skills add belt-sh/clito install the primary tool dependency.
Audit Metadata